@fraser.ai: Claude Code Skills ARE NOT SAFE? One in four AI coding skills has a security hole. One in twenty is straight-up malicious. NVIDIA scanned 42,000 of them to find that out. So I took the tool they built and pointed it at Ponytail — the token-saver that's blown up this week — before installing it. Score: 100/100. Critical. 44 issues, including a known vulnerable dependency and scripts that persist across sessions. That's not to say you shouldn't install it — plenty of flagged repos are still fine. But a quick one-line prompt tells you whether it's worth looking at the code first, instead of running it blind. NVIDIA's SkillSpector does that in about ten seconds. Free, open source Scan before you install. #ClaudeCode #Claude #AIAutomation